Operation management device, operation management method, and operation management program

Abstract

An operation management apparatus decides that newly-generated event data and previously-existing predictive event data match if the attribute values of the event data match the attribute values of the predictive event data excluding reference values. In such a case, the apparatus identifies individual filter information whose attribute values excluding reference values match the attribute values of the event data, and substitutes the attribute values of the event data for variables in each piece of individual filter information belonging to a group to which the individual filter information belongs, thereby generating predictive event data for each piece of individual filter information. The apparatus decides whether or not each piece of event data that is associated in a predictive event index with the group to which the individual filter information that matches the event data used for generating the predictive event data belongs satisfies the individual filter information of operation rule information corresponding to the group, and if satisfies, performs processing defined by the operation rule information.

Description

TECHNICAL FIELD[0001]The present invention relates to an operation management apparatus, an operation management method, and an operation management program for analyzing the system state of a service system that provides information and communication services such as a WEB service and business service. In particular, the present invention relates to an operation management apparatus, an operation management method, and an operation management program that can improve the reliability of the service system and reduce operating burdens on a person who operates the operation management apparatus.BACKGROUND ART[0002]With the growing importance of WEB services and other information and communication services as social infrastructure, stable operation has become important of apparatuses that provide the services (hereinafter, referred to as service systems). The operation management of such service systems has been manually conducted by administrators heretofore. As the service systems in...

AI Technical Summary

Benefits of technology

[0103]The present invention uses individual filter information which is information that constitutes conditions defined for respective pieces of operation rule information and that associates attributes and attribute values, where some of the attribute values may be written as a reference value estimated from past event data and some of the attribute values may be written as a variable. The present invention also uses predictive event data that is data in which the attribute values of event data generated by the system to be managed are substituted for the attribute values that are written as variables in the individual filter information. Moreover, the present invention includes the above-mentioned predictive event index storing section, predictive event correspondence table storing section, and predictive event data matching decision section. Consequently, it is possible to set rule conditions suited to the environment and enhance the precision of the rule conditions.

[0104]Since the predictive event data matching decision section decides whether or not event data matches predictive event data which has a similar form to that of the actually-occurring event data, it is easy to describe correlations between a plurality of pieces of event data, so that event data that is expected to occur in advance can be processed by priority. The processing speed can thus be improved significantly as compared to the operation management apparatus of the related art where all the condition expressions need to be compared. This results in applicability to environment that has a lot of rule conditions such as a large-scale environment.

[0105]Moreover, since the predictive event data is generated by developing environment-dependent conditions such as correlationships into specific values, it is possible to detect differences from the predicted values and present the differences to the administrator to prompt actions, for example, when the device configuration or software behavior is changed. This makes it possible to support the activities of following environmental changes and sophisticating the operation rule information for efficient operation.

Problems solved by technology

As the service systems increase in scale and complexity, however, the knowledge and operational burdens required of the administrators have increased dramatically, causing such problems as service suspension due to a decision error or operation error.

Images